CVE-2025-54413: Skops Arbitrary Code Execution via MethodNode Vulnerability
Summary
CVE-2025-54413: An inconsistency in MethodNode can be exploited to access unexpected object fields through dot notation. Affects skops versions < 0.12.0. Fixed in 0.12.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Skops is an open-source library designed for the serialization and deserialization of machine learning models in Python. It allows users to save and load models in a structured format, facilitating easy sharing and deployment. However, a critical vulnerability has been identified in the MethodNode component, which can lead to arbitrary code execution during the loading process of models, posing significant security risks.
Vulnerability Detail
The vulnerability arises from an inconsistency in the MethodNode's handling of object attributes accessed via dot notation. Specifically, while the class and module fields are checked during the loading phase, they are not utilized by MethodNode to enforce security. This oversight allows attackers to chain multiple MethodNode instances, traversing the object hierarchy to access dangerous attributes or methods, including built-in functions like exec and eval. As a result, an attacker can craft a malicious model file that executes arbitrary code on the victim's machine at load time, without any user interaction beyond loading the model.
How To Fix
Latest published version: 0.16.0 as of 23 Oct 2026
pip install --upgrade "skops==0.16.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.12.0
This is the first release that contains the fix.
pip install --upgrade "skops==0.12.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid loading untrusted model files or ensure that the models you load are from trusted sources. Additionally, you can implement strict validation checks on the attributes accessed through MethodNode to mitigate the risk of arbitrary code execution.
Conclusion
The CVE-2025-54413 vulnerability in the Skops library poses a significant risk due to its potential for arbitrary code execution during model loading. Users are strongly advised to update to the latest version to protect against this threat and to implement best practices for loading models from trusted sources.
See every vulnerability recorded for skops →
FAQ
CVE-2025-54413 is a vulnerability in the Skops library that allows for arbitrary code execution through the MethodNode component during model loading.
The vulnerability has a CVSS score of 8.7, indicating a high severity level that can lead to significant security risks if exploited.
If you are using Skops, it is crucial to update to version 0.12.0 or later to mitigate the risks associated with this vulnerability.
Yes, you can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Exploitation of this vulnerability can lead to arbitrary code execution on the victim's machine, allowing attackers to execute malicious commands or access sensitive data.
References
Related vulnerabilities
Recent vulnerabilities recorded for skops.
